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® An encryption system based on Chaos theory. 



@ An encryption system and method based on the mathematics of Chaos theory, which provides protection of 
data from unauthorized modification and use during its storage and transmission. At its core are nonlinear 
equations which exhibits random, noise-like properties, given certain parameter values. When Iterated, a periodic 
sequence is produced with an extremely long cycle length. A domain transformation process is then used to 
convert the floating-point Iterates into binary form for summation with the digital data to be protected. The result 
is an encrypted message that cannot be modified, replaced, or understood by anyone other than the intended 
party. The use of Chaos theory in combination with the domain transformation process results in an easily 
implemented cryptographic system with extremely robust cryptographic properties. The concepts of the present 
Invention also lend themselves well to either hardware or software implementations. The cryptographic system of 
the present invention may be employed to encrypt and decrypt sensitive information, to authenticate data and 
video links, or similar applications. It can also be used to provide a simple hash function for the secure storage 
of passwords in a computer system. Its simplicity, requiring only floating-point operations at Its core, allows a 
lower cost and higher performance product with cryptographic security equivalent to conventional cryptographic 
systems. 
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BACKGROUND 

The present invention relates generally to encryption systems, and more particularly, to an encryption 
system that is implemented using the concepts of Chaos theory. 

5 Cryptography is the science of protecting information from eavesdropping and interception. The two 
principle objectives are secrecy (to prevent unauthorized disclosure) and integrity (to prevent unauthorized 
modification). A number of products are available to provide this protection, but they tend to be complex 
and slow, or fast but cryptographically not very robust. The Data Encryption Standard (DES) is one example 
of a robust algorithm, however its software implementations are slow due to its complexity, and its hardware 

10 implementations require complex devices. Proprietary algorithms have also been used, however their 
strength is not always verifiable since design details are usually not publicly disclosed. In addition, complex 
algorithms require significant human and computing resources to prove their strength, and even then hidden 
weaknesses are occasionally discovered at a later time. The present invention overcomes these problems. 
The DES and Rivest Shamir Aldeman (RSA) cryptographic systems are the best known and most 

75 widely used products available for comparison. The Data Encryption Standard and the present invention 
perform similar functions and can generally be used in the same applications. The DES is available in either 
hardware or software versions, allowing flexibility for the application developer. The disadvantage with 
software versions of the DES is that its algorithm is based on a complex state machine, and state machines 
do not translate well into software. Computers are much better suited to operations on 8-, 16-, or 32-bit 

20 words, and DES requires intensive operations at the individual bit level. One DES implementation that was 
tested required the execution of about 5,000 high-level software statements, which is unnecessarily high. 

The RSA algorithm can likewise be implemented in software or hardware, although hardware is the 
most common, since its processes rely on complicated mathematics which execute too slowly in software 
for most applications. In addition to its slow speed, another disadvantage is that while being considered 

25 computationally secure today, it may not be in the future. Its strength is based on the computationally 
difficult problem of factoring large prime numbers. If a more efficient algorithm were to be discovered, its 
security could be weakened. Since this invention cannot be reduced to such a simple mathematical 
function, it represents a more robust system The present invention overcomes the problems associated with 
the Data Encryption Standard and RSA cryptographic systems. 

30 

SUMMARY OF THE INVENTION 

This invention is an encryption system based on the mathematics of Chaos theory, which provides 
protection of data from unauthorized modification and use during its storage and transmission. At its core is 

35 a nonlinear equation which exhibits random, noise-like properties when certain parameters are used. In 
particular, one such nonlinear equation is the logistic difference equation: x^+i = uxn(1-Xn), which is chaotic 
for certain values of u, wherein u acts as a tuning parameter for the equation. When iterated, a periodic 
sequence is produced with an extremely long cycle length. A domain transformation process is then used 
to convert the floating-point iterates into binary form for summation with the digital data to be protected. The 

40 result is an encrypted message which cannot be modified, replaced, or understood by anyone other than 
the intended party. The use of Chaos theory in combination with the domain transformation process results 
in a cryptographic system with extremely robust cryptographic properties. 

A simple mathematical formula with complex properties is used instead of a complex state machine 
with complex properties. This allows faster operation, while at the same time reduces the possibility of a 

45 hidden or undiscovered cryptographic weakness. In addition, knowledge of the algorithm does not simplify 
recovery of the key. In fact, even when the conditions most favorable to a cryptanalyst are allowed, key 
protection is maintained when other more conventional systems would be broken. This is made possible by 
a unique one-way domain transformation process which results in the loss of information critical to the 
cryptanalyst's success. The combination of these techniques results In a cryptographic system that is 

50 extremely simple to implement, yet is cryptographically very robust. It also lends itself well to either a 
hardware or software implementation. 

The cryptographic system of the present invention may be employed to protect sensitive information, or 
to authenticate data and video links, or to support secure computer systems, or similar applications. It can 
also be used to provide a simple hash function for the secure storage of passwords in a computer system. 

55 Its simplicity, requiring only floating-point operations at Its core, allows a lower cost and higher performance 
product with cryptographic security equivalent to the most widely used cryptographic systems. 

BRIEF DESCRIPTION OF THE DRAWINGS 
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The various features and advantages of the present invention may be nnore readily understood with 
reference to the following detailed description taken in conjunction with the accompanying drawings, 
wherein like reference numerals designate like structural elements, and In which: 

FIG. 1 is a flowchart showing an encryption process in accordance with the principles of the present 
5 invention; 

FIG. 2 is a flowchart showing a decryption process in accordance with the principles of the present 

invention; 

FIG. 3 is a diagram showing an encryption and decryption system without error extension in accordance 
with the principles of the present invention; 
10 FIG. 4 is a diagram showing an encryption and decryption system with error extension in accordance 
with the principles of the present invention; and 

FIG. 5 is a functional block diagram of the encryption and decryption system in accordance with the 
principles of the present invention. 

75 DETAILED DESCRIPTION 

By way of introduction, Chaos theory is an evolving field of mathematics that studies the behavior of 
nonlinear systems. When properly initialized, these systems exhibit chaotic behavior when iterated. Chaotic 
behavior may be described as a form of steady state behavior which is aperiodic and as such appears to 

20 have noise-like characteristics. This behavior, although aperiodic, is bounded, and while the chaotic 
trajectory never exactly repeats itself, the trajectory is completely deterministic given the exact initial 
conditions and parameter values. These chaotic properties are used to generate an aperiodic sequence for 
use as the keystream in the encryption system of the present invention. 

It is useful to draw an analogy with a common linear sequence generator. Both the present invention 

25 and the linear sequence generator produce pseudo-random sequences from a given starting point, and both 
have a finite cycle length. However, the frequency spectrum of a chaotic system is continuous and 
broadband, whereas the linear sequence generator is discrete. This property offers significant advantages 
when used In an encryption system, since its statistical properties are more noise-like when small sections 
of the entire state space are considered. For example, the statistical performance of a 1 ,000 bit sample 

30 taken from a linear sequence generator with 10 million states will not appear very noise-like due to the small 
percentage of available states used. A chaotic system under the same conditions would appear more noise- 
like. 

The logistic difference equation is one of the simplest nonlinear functions which exhibits chaotic 
characteristics, and is the first of two processes used in the present invention. Although this function is used 

35 in the following description, it is only one of a number of functions with similar properties. The concepts of 
the present invention permit any of this entire class of functions to be used. The logistic difference equation 
is defined as: x„+i = uxn(l-Xn), where u is a constant between 0.0 and 4.0 and x is the iterated result 
between 0.0 and 1 .0. Approximately 90% of u values between 3.57 and 4.0 result in chaotic behavior, and 
the particular value selected remains constant throughout the iterations. An initial value of Xn is chosen to 

40 begin the process. An extremely minor change to this initial value will result in a completely different 
sequence; 0.1000000000 will produce a different sequence than 0.1000000001. The initial values simply 
determine different starting positions in the same very long sequence for any given value of u. 

It has been mathematically proven that operation in the chaotic region will produce an aperiodic 
sequence, making it appear as if an infinite cycle length can be obtained. Reference Is hereby made to the 

45 thesis by Dana Reed entitled "Spectrum Spreading Codes from the Logistic Difference Equation," 
submitted to the Department of Electrical Engineering and Computer Science at the University of Colorado, 
having a reference number of LD1190.E54 1989M R43, the contents of which are incorporated herein by 
reference. 

In practice, however, the floating-point precision of the machine implementation determines the 
50 maximum cycle length that is available. With the 12-digit precision typically available on most computers, 
the maximum cycle length would be on the order of 10^^ iterates. An IBM-PC with a math coprocessor 
could produce about 10^^ iterates. Due to the number of variable parameters, however, it is extremely 
difficult to determine an exact cycle length. This has both advantages and disadvantages for an encryption 
application. For comparison, the Data Encryption Standard has a cycle length of about 10^^ states. To 
55 illustrate the magnitude of these numbers, a system implementing this algorithm and operated continuously 
at a 1 Megabit/sec rate would not repeat for 11.6 days with 10^^ iterates, and for 317.000 years with 10^^ 
iterates. Given the same conditions, the Data Encryption Standard would not repeat for 317 years. This 
illustrates the flexibility of the present invention, since extremely long cycle lengths can be obtained by 
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simply increasing the precision of the implementation. 

Two characteristics of the above logistic difference equation allow it to be used within an encryption 
system. First, for any given u and x„, the logistic difference equation deterministically generates an 
extremely large number of uniformly distributed iterates. This allows a decryptor to easily obtain synchro- 

5 nization with the encryptor. and the uniform statistical distribution increases the robustness of the encrypted 
data against recovery by cryptanalysis. Second, changing the value of u or x will result in a totally different 
sequence, allowing u to be used as the "key" and Xn as the "preamble". 

The second function used in the present invention is a domain transformation process. Since the 
logistic difference equation produces real numbers between 0.0 and 1 .0, its iterates must be converted to a 

10 binary 0 or 1 before encryption of digital data can take place. This is accomplished with a two-stage 
numerical filter process. The first stage limits the range of iterate values to be used and the second stage 
converts them into a binary 0 or 1 . Iterates between the lower limit and midrange are converted into 0*s, 
and iterates between the midrange and upper limit are converted into Vs. This is essentially a transforma- 
tion from the continuous domain to the discrete domain, which is an irreversible process. 

15 This transformation results in significantly greater cryptographic strength than use of the logistic 
difference equation alone. For example, by passing only those values between 0.4 and 0.6 to the second 
stage, a significant number of intermediate iterates will never become part of the keystream. Due to the 
irreversible nature of this transformation and the use of a discontinuous number of iterates, the actual Xp 
values cannot be recovered from knowledge of the binary keystream. By denying a cryptanalyst of this 

20 information, the work factor required to recover the message or its key from the transmitted data increases 
to the point of computational infeasibility. The number of variables involved also allow the iterates to be 
periodically perturbed, effectively adding another discontinuity to further complicate cryptanalysis. 

Due to the nature of the present invention, a software implementation thereof is a natural choice. Any 
computer capable of floating-point operations can be used. The optional use of a math coprocessor offers 

25 the benefit of increased execution speed, and its higher precision increases the effective state space. 
Flowcharts of the encryption and decryption processes, and a system diagram of a typical implementation 
are shown in FIGS. 1 , 2, and 3, respectively, and an implementation in the Pascal language is provided in 
Appendix I hereto. 

With reference to FIG. 1, which illustrates the encryption sequence of the present invention, the 

30 parameter u, the upper and lower limits of the iterate range, and an initialization count (run-up) are supplied 
as the "cryptographic key" in step 20. The midpoint between the upper and lower limits is then calculated 
in step 21 for later use by the domain transformation process. A random starting point is then created in 
step 22 which is nonrepeatable and nonpredictable between encryption sessions. This will be the initial 
value of Xn, and is saved so that it can be prepended to the following encrypted message. Examples are the 

35 time and date when encryption is initiated, or a variety of system-specific parameters previously agreed 
upon by the encryptor and decryptor. The equation is then iterated in step 23 for the run-up amount 
specified in the key to determine the initial starting point. The next iterate is then generated in step 24 and 
tested in step 25 to determine if it is within the specified range. If so, it is converted Into a binary 0 or 1 in 
step 26, otherwise it is ignored and a new iterate is calculated and tested by repeating steps 24 and 25. 

40 The resulting binary value is summed modulo-2 in step 27 witii one bit of plain text (data to be encrypted), 
creating a ciphertext bit which can either be stored or immediately output. This process is repeated until the 
entire message has been encrypted as indicated by the decision block 28 and loop 29. Although this 
description performs encryption on a bit-for-bit basis, multiple-bit words may also he encrypted by 
repeating steps 24, 25, and 26 an appropriate number of times before summing with a multiple-bit block of 

45 the message. This is illustrated by loop 30 in FIG. 1. For example, an 8-bit byte may be encrypted by 
generating 8 bits of keystream. then performing step 27 only once. 

The decryption process is similar. With reference to FIG. 2, the cryptographic key is loaded in step 40 
and the midpoint is calculated in step 41 . Using encryptor randomization based on the time and date, for 
example, the initial value of Xn will he received with the encrypted message as indicated in step 42. Using 

50 system-specific parameters, the initial value may either be transmitted witii the message or calculated 
independently by the receiver according to the agreed upon procedure. As before, the equation is initialized 
and iterated the proper number of times as indicated by steps 43, 44, and 45, followed by generation of the 
keystream by converting the iterates to binary, as shown in step 46. When modulo-2 summed with the 
ciphertext in step 47. the original message is recovered. The multiple-bit word decryption steps are 

55 illustrated by loop 50 which corresponds to loop 30 in FIG. 1. 

A typical software implementation is provided in Appendix I hereto. The same procedure may be used 
for encryption and decryption, depending on whetiier the plain message of ciphertext is used for "data". 
FIG. 3 illustrates an Implementation of an encryption and decryption system 60. The system 60 uses a 
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cryptographic key 61 and a randomly created initial value 62 within a keystreanr) generator 63 comprised of 
the logistic difference equation and domain transformation process. The output of the process 63 is coupled 
to a modulo-2 adder 64 that combines the message to be encrypted with a binary value generated by the 
keystream generator 63 to produce encrypted ciphertext. The ciphertext is then communicated to the 

5 decryption portion of the system 60. The cryptographic key 65 and received initial value 66 are used by a 
keystream generator 67 comprising the logistic difference equation and domain transformation process. The 
output of the keystream generator 67 is coupled to a modulo-2 adder 68 that combines the message to be 
decrypted with the binary value generated by the keystream generator 67 to recover the original message. 
The above-described system 60 and methods have no error extension, so that a single bit error in the 

10 received ciphertext results in one incorrect bit in the decrypted message. A minor modification to the 
system 60 and its processes, however, provide an error extending mode of operation. A diagram of this 
modified system 60a is shown in FIG. 4. Keystream bits are fed sequentially into a first-in-first-out array 72 
by way of a modulo-2 adder 71, instead of being immediately used. As each bit of the message is 
encrypted, the ciphertext is modulo-2 added with a new keystream bit and fed back into the array. After a 

15 short delay, It is then modulo-2 summed again with another bit of the message. Similarly, the decryption 
portion of the system 60a also includes an additional adder 74 and a FIFO array 75, which operate as 
described above. In this case, a single bit error in the received ciphertext will result in a number of errors as 
it propagates through the array. For example, a 4-element array produces 16 errors for each ciphertext bit. 
Assuming that the following ciphertext is received error-free, recovery of the original message then 

20 continues. 

Implementing the above-described algorithm in hardware offers the benefits of increased speed and 
greater protection against reverse engineering and unauthorized modification. Any hardware implementation 
may he used, including off-the-shelf microprocessors and digital signal processors, gate arrays, program- 
mable logic devices, or full custom integrated circuits. For descriptive purposes, only the gate array option 

25 is discussed below. It performs all of the functions previously discussed, and its arithmetic logic unit may he 
customized in a conventional manner to provide the desired level of floating point precision. A functional 
block diagram of the hardware system 80 is shown in FIG. 5. At its core is an arithmetic logic unit 81 
capable of floating point operations to the precision desired. An arithmetic logic unit controller 82 
implements the necessary control logic in a conventional manner to iterate a variety of predefined chaotic 

30 equations, and provides the numerical filter and binary conversion functions. Since the arithmetic logic unit 
81 needs to produce many iterates for each keystream bit when narrow filters are used, a separate system 
clock at an operating frequency greater than the data clock is provided to maintain high encryption rates. 
The remaining portions of the system 80 provide support functions, and include a randomizer 83. key 
storage memory 84, an I/O interface 85. a control sequencer 86 and a modulo-2 adder 87. However, it is the 

35 arithmetic logic unit 81 and arithmetic logic unit controller 82 which implement the functions performed by 
the present invention. The I/O interface 85 communicates with a host processor (not shown), and the control 
sequencer 86 directs the overall operations of the system 80. The key storage memory 84 is provided to 
store multiple keys, and the randomizer 83 provides random number generation for algorithm initialization. 
The same system 80 may be used for both encryption and decryption since the process is symmetric. 

40 As mentioned above, I/O configurations and the randomization process are not specified herein since they 
are specific to each particular host system. Although the algorithm is best suited to processing serial data, a 
parallel architecture may he implemented by including the appropriate serial-to-parallel converters. 

A software program embodying this invention was developed to investigate its properties. All critical 
functions and processes claimed herein were implemented, and encryption and decryption of sample 

45 messages were successfully demonstrated. In addition, a variety of standard statistical tests were performed 
on samples of 1 million keystream bits, using many combinations of the variable parameters. Tables 1 and 
2 illustrate the distributions of typical 1 million bit samples. They indicate that the keystreams were 
statistically unbiased, and that totally different keystreams were obtained from minor changes to the initial 
conditions. Auto-correlation and cross-correlation tests were also performed, which confirmed that the 

50 keystreams were indeed nondeterminlstic. For comparison, Table 3 illustrates the performance of a 
standard Department of Defense (DoD) randomizer that uses a random physical process as Its noise 
source. It is clear that the performance of the present invention compares favorably. This randomness is an 
essential property of all cryptographlcally robust encryption systems. 

55 
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Table 1 

|i = 3.9996, x = 0.1, x2 = 216.2 
lower limit = 0.49, upper limit = 0.51 
Mono bit = 0.5000 First Delta = 0.4998 Second Ddta = 0.4999 Third Delta = 0.5003 
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Table 2 

H = 3.9996, X = 0.1000000001. = 245.9 
lower limit = 0.49, upper limit = 0.51 
Mono bit = 0.5000 First Delta = 0.4999 Second Delta = 0.4998 Thiid Delu = 0.4997 
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Table 3 

The output from a DoD approved random source, = 283.2 
Mono bit = 0.4994 First Delta = 0.5001 Second Delta = 0.5002 Hiiid Delta = 0.4997 
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510 


484 


466 


481 


40: 


463 


444 


474 


509 


495 


472 


484 


504 


510 


486 


461 


484 


510 


473 


493 


467 


50: 


473 


487 


473 


440 


529 


518 


529 


460 


500 


516 


498 


507 


452 


506 


534 


482 


60: 


453 


485 


490 


515 


460 


496 


426 


505 


492 498 


477 


483 


463 


550 


443 


479 


70: 


503 


496 


485 


462 


462 


535 


490 


478 


475 


462 


455 


515 


517 


483 


504 


475 


80: 


485 


507 


520 


480 


499 


490 


487 


461 


465 


467 


449 


478 


460 


500 


509 


478 


90: 


488 


470 


445 


445 


457 


481 


511 


466 


485 


468 


517 


491 


469 


464 


471 


461 


AO: 


483 


472 


450 


511 


497 


476 


498 


493 


519 


473 


497 


501 


500 


482 


520 


532 


BO: 


529 


492 


499 


511 


458 


474 


465 


521 


504 


463 


512 


491 


451 


451 


441 


488 


CO: 


488 


482 


498 


486 


451 


468 


539 


491 


525 


472 


498 


521 


468 


497 


478 


488 


DO: 


537 


495 


538 


510 


509 


484 


510 


492 


523 


499 


479 


481 


464 


458 


474 


496 


EO: 


482 


472 


474 


502 


488 


469 


499 


510 


504 


489 


504 


463 


466 


450 


498 


510 


FO: 


494 


475 


479 


500 


497 


425 


517 


488 


486 


484 


458 


513 


510 


529 


473 


438 



Run Count Zeros Ones Ejq)ected Value 

1 125202 124815 125000 

2 61970 62780 62500 

3 31213 31416 31250 

4 15720 15366 15625 

5 7880 7767 7812 

6 4062 3918 3906 

7 1946 1951 1953 

8 996 998 976 

9 492 505 488 

10 234 218 244 

11 115 99 122 

12 49 65 61 
>12 70 52 61 



Thus there has been described a new and improved encryption system that is implemented using the 
concepts of Chaos theory. It is to he understood that the above-described embodiments are merely 
illustrative of some of the many specific embodiments which represent applications of the principles of the 
present Invention. Clearly, numerous and other arrangements can be readily devised by those sidlled in the 
art without departing from the scope of the Invention. 
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APPENDIX 1 



10 



15 



20 



25 



30 



35 



Code 
BEGIN 
gci.kcy; 

midpoint: = (upper.limit + lower_liniit)/2 
randomize; 

x: = random_vaIue; 
for temp = 0 to run_up 



X ♦ x; 



repeat 
repeat 



Comments 

{key contains fields for ^ 
{upper.Iimit, lower Jimit, run-up^ 
{calculate midpoint 
(caU a routine to generate a random 
(starting point 

(assign random value as the initial value 
(inidalize by iterating for the amount 
(specified by run-up 

(repeat for entire message 

(iterate until x is between lower and 

(upper limits 



x:= >i*x-^i*x*x; 

until (x > lower Jimit) and (x < upper_limit) 



if X > midpoint then keystream : = 1 

else keystteam : = 0; 
output : = keystream XOR data; 
until end of message; 
END 



(convert to binary 

(encrypt 
(done 



40 



45 



50 



55 



Claims 

1. A method of encrypting data comprising the steps of: 

generating a random value having a selected mathematical precision; 

generating an Initial state of a predetermined chaotic equation by iterating with the random value 
and a key value having a selected mathematical precision, for a selected number of iterations; 

iterating the chaotic equation to generate a periodic sequence of encrypting iterates having an 
extremely long cycle length; 

performing a domain transformation by converting the encrypting iterates into binary form; and 

summing the encrypting iterates in binary form with digital data to t»e encrypted to generate 
encrypted data. 

2. The method of Claim 1 wherein the step of iterating the chaotic equation further comprises the step of: 

reiterating the the chaotic equation to generate a periodic sequence of encrypting iterates whose 
values are within a selected range. 

3. The method of Claim 1 wherein the predetermined chaotic equation comprises the logistic difference 
equation Xn^i = tJLXn(l-Xn). where u is a constant and x is an iterated result. 
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4, The method of Claim 1 wherein the step of iterating the chaotic equation further comprises selecting a 
desired mathematical precision for the iterating process to alter the periodic sequence of encrypting 
iterates. 

5 5. The method of Claim 1 wherein the step of iterating the chaotic equation comprises the step of Iterating 
the chaotic equation using a discontinuous set of encrypting iterates. 

6. The method of Claim 1 wherein the step of Iterating the chaotic equation comprises the step of 
periodically perturbing the iterates to add a further discontinuity in the binary encrypting iterates 

10 generated by the domain transformation step. 

7. The method of Claim 1 wherein the step of Iterating the chaotic equation further comprises the steps of: 

feeding back the encrypted data; 

summing the encrypted data with the periodic sequence of encrypting iterates to generate a 
75 second set of encrypting iterates; 

delaying the summed second set of encrypting iterates for a selected time period; and 
summing the delayed second set of encrypting iterates with digital data to be encrypted to 
generate encrypted data. 

20 8. The method of Claim 1 further comprising the steps of: 

Iterating the chaotic equation and performing the domain transformation a selected number of 
times; and 

then summing the encrypting Iterates with digital data to be encrypted to generate encrypted data. 

25 9. A method of decrypting data encrypted In accordance with the method of Claim 1. said method 
comprising the steps of: 

receiving encrypted data that is to be decrypted; 
receiving the random value. 

generating an Initial state of the chaotic equation by iterating with the random value and a key 
30 value, for the selected number of iterations; 

iterating the chaotic equation to generate a periodic sequence of decrypting iterates having an 
extremely long cycle length; 

performing a domain transformation by converting the decrypting Iterates into binary form; and 

summing the decrypting iterates in binary form with the encrypted digital data to be decrypted to 
35 generate decrypted data. 

10. The method of Claim 9 wherein the step of iterating the chaotic equation further comprises the step of: 

reiterating the the chaotic equation to generate a periodic sequence of decrypting iterates whose 
values are within a selected range. 

40 

11. The method of Claim 9 wherein the predetermined chaotic equation comprises the logistic difference 
equation Xn+i = jiXn(l-Xn), where u is a constant and x Is an Iterated result. 

12. The method of Claim 9 wherein the step of iterating the chaotic equation further comprises the steps of: 
45 summing the encrypted data with the periodic sequence of decrypting iterates In binary form to 

generate a second set of decrypting Iterates; 

delaying the second set of decrypting iterates for a selected time period; and 

summing the delayed second set of decrypting iterates with encrypted data to be decrypted to 

generate decrypted data. 

50 

13- The method of Claim 9 further comprising the steps of: 

Iterating the chaotic equation and performing the domain transformation a selected number of 
times; and 

then summing the decrypted iterates with encrypted data to generate decrypted data. 

55 

14. A method of encrypting data comprising the steps of: 

generating a random value having a selected mathematical precision; 

generating an initial state of a predetermined logistic difference equation by iterating with the 
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random value and a key value having a selected nnathematlcal precision, for a selected number of 
iterations; 

iterating the logistic difference equation to generate a periodic sequence of encrypting Iterates 
having an extremely long cycle length; 
5 performing a domain transformation by converting the encrypting Iterates Into binary form; and 

summing the encrypting Iterates in binary form with digital data to he encrypted to generate 
encrypted data. 

15. The method of Claim 14 wherein the step of iterating the logistic difference equation further comprises 
10 the step of: 

reiterating the the chaotic equation to generate a periodic sequence of encrypting iterates whose 
values are within a selected range. 

16. The method of Claim 14 wherein the logistic difference equation comprises the equation Xn+i = UXn(1- 
75 Xn), where u is a constant and x is an Iterated result. 

17. The method of Claim 14 wherein the step of iterating the logistic difference equation further comprises 
adjusting the mathematical precision of the random value and key value to adjust the cycle length of 
the periodic sequence of encrypting iterates. 

20 

18. The method of Claim 14 wherein the step of iterating the logistic difference equation comprises the 
step of iterating the logistic difference equation using a discontinuous set of encrypting iterates. 

19. The method of Claim 14 wherein the step of iterating the logistic difference equation comprises the 
25 step of periodically perturbing the iterates to add a further discontinuity in the binary encrypting Iterates 

generated by the domain transformation step. 

20. The method of Claim 14 wherein the step of Iterating the logistic difference equation further comprises 
the steps of: 

30 feeding back the encrypted data; 

summing the encrypted data with the periodic sequence of encrypting iterates to generate a 
second set of encrypting iterates; 

delaying the summed second set of encrypting iterates for a selected time period; 

summing the delayed second set of encrypting iterates with digital data to be encrypted to 
35 generate encrypted data. 

21. The method of Claim 14 further comprising the steps of: 

iterating the logistic difference equation and performing the domain transformation a selected 
number of times; and 

40 then summing the encrypting Iterates with digital data to be encrypted to generate encrypted data. 

22. A method of decrypting data encrypted in accordance with the method of Claim 14. said method 
comprising the steps of: 

receiving encrypted data that is to be decrypted; 
45 receiving the random value. 

generating an initial state of the logistic difference equation by iterating with the random value and 
a key value, for the selected number of iterations; 

iterating the logistic difference equation to generate a periodic sequence of decrypting iterates 
having an extremely long cycle length; 
50 performing a domain transformation by converting tiie decrypting iterates into binary form; and 

summing the decrypting iterates in binary form with the encrypted digital data to be decrypted to 
generate decrypted data. 

23. The method of Claim 22 wherein the step of iterating the logistic difference equation further comprises 
55 the step of: 

reiterating the the logistic difference equation to generate a periodic sequence of decrypting 
iterates whose values are within a selected range. 
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24. The method of Claim 22 wherein the logistic difference equation comprises the equation x„+i = UXn(1- 
Xn). where u is a constant and x is an iterated result. 

25. The method of Claim 22 wherein the step of iterating the logistic difference equation further comprises 
5 the steps of: 

summing the encrypted data with the periodic sequence of decrypting iterates in binary form to 
generate a second set of decrypting iterates; 

delaying the second set of decrypting iterates for a selected time period; and 
summing the delayed second set of decrypting iterates with encrypted data to be decrypted to 
10 generate decrypted data. 

26. The method of Claim 22 further comprising the steps of: 

iterating the logistic difference equation and performing the domain transformation a selected 
number of times; and 

15 then summing the decrypted iterates with encrypted data to generate decrypted data. 

27. A cryptographic system comprising: 

a random number generator; 

a memory for storing one or more cryptographic keys; 
20 an arithmetic logic unit and controller means coupled to the random number generator and memory 

for iterating a predetermined chaotic equation using random numbers generated by the random number 
generator and the cryptographic key, and for generating a periodic sequence of iterates, and for 
performing a domain transformation by converting the periodic sequence of iterates into binary form; 
adder means coupled to the arithmetic logic unit and controller means for summing the iterates 
25 with digital data: and 

controller means for controlling the operation of and transfer of data between the random number 
generator, the memory, the arithmetic logic unit and controller means, and the adder. 

28. The system of Claim 27 wherein the arithmetic logic unit and controller means iterates a chaotic 
30 equation comprising the logistic difference equation Xn+i = uxn(l-Xn). where u is a constant and x is an 

iterated result. 

29. The system of Claim 27 wherein the arithmetic logic unit and controller means comprises: 

means for adjusting the mathematical precision of the arithmetic logic unit to adjust the periodic 
35 sequence of encrypting iterates. 

30. The system of Claim 27 wherein the arithmetic logic unit and controller means comprises: 

means for iterating the chaotic equation using a discontinuous set of encrypting iterates. 

40 31. The system of Claim 27 wherein the arithmetic logic unit and contiroller means comprises: 

means for periodically perturbing the iterates to add a further discontinuity in the binary encrypting 
iterates generated by the domain transformation step. 

32. The system of Claim 27 wherein the arithmetic logic unit and controller means comprises: 
45 means for feeding back the encrypted data; 

means for summing the encrypted data with the periodic sequence of encrypting iterates to 
generate a second set of encrypting iterates; 

means for delaying the summed second set of encrypting iterates for a selected time period; and 
means for summing the delayed second set of encrypting iterates with digital data to be encrypted 
50 to generate encrypted data. 

33. The system of Claim 27 wherein the arithmetic logic unit and controller means comprises: 

means for iterating the chaotic equation and performing the domain transformation a selected 
number of times; and 

55 means for summing the encrypting iterates with digital data to be encrypted to generate encrypted 

data. 
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